CVEvulnerability
CVE-2007-3675
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-134
Description
Multiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control (kavwebscan.dll) in Kaspersky Online Scanner before 5.0.98 allow remote attackers to execute arbitrary code via format string specifiers in "various string formatting functions," which trigger heap-based buffer overflows.
Affected configurations
• kaspersky lab online scanner (<= 5.0.93)
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=606 labs.idefense.com
- http://secunia.com/advisories/27187 Patch, Vendor Advisory
- http://securitytracker.com/id?1018800 Patch
- http://www.kaspersky.com/news?id=207575572 Patch
- http://www.securityfocus.com/bid/26004 Patch
- http://www.vupen.com/english/advisories/2007/3455 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37057 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=606 labs.idefense.com
- http://secunia.com/advisories/27187 Patch, Vendor Advisory
- http://securitytracker.com/id?1018800 Patch
- http://www.kaspersky.com/news?id=207575572 Patch
- http://www.securityfocus.com/bid/26004 Patch
- http://www.vupen.com/english/advisories/2007/3455 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37057 exchange.xforce.ibmcloud.com